Description
SecurityAgent in Apple OS X before 10.10 does not ensure that a Kerberos ticket is in the cache for the correct user, which allows local users to gain privileges in opportunistic circumstances by leveraging a Fast User Switching login.
References
- macosx-cve20144444-sec-bypass(97623) vdb-entry
- APPLE-SA-2014-10-16-1 vendor-advisory
- 1031063 vdb-entry
- https://support.apple.com/kb/HT6535